Hailstone (@HailstoneSec) header
Hailstone (@HailstoneSec) profile picture

Code Confidently. Security For Developers, By Developers.

127.0.0.1
Joined February 2018
Photo by Hailstone (@HailstoneSec)Photo by Hailstone (@HailstoneSec)Photo by Hailstone (@HailstoneSec)
The 12 Factor Apps via @ryanwaskiewicz “12 factor apps help you spend less time managing deps across envs, and more time on your code.” #EmpireJS
Data breaches are out of control! — via ⁦@foobartel⁩ #empirejs #appsec
2
2
Going to be demoing Hailstone’s real-time security testing solution for Node.js in the @EmpireJS lobby at 11am (break) and 1pm (lunch) #empirejs
1
1
Heading to @EmpireJS tomorrow? Want to talk security over coffee? Look out for our co-founder @joepelletier wearing a black “Hailstone” t-shirt 👋 #empirejs
1
2
This #security best practice is unfortunately not (yet) on our #NodeJS best practices list (sad Smiley): Prevent Unsafe Redirects that look trustworthy to the user, yourdomain.com/login?redirec… blog.hailstone.io/how-to-pre…
2
6
8
How to Prevent Unsafe HTTP Redirects in Node: blog.hailstone.io/how-to-pre…
1
35
3
109
Interested in seeing a demo of Hailstone? Sign up at Hailstone.io and we'll be in touch shortly!
Node.js Template Engines: Why Default Encoders Are Not Enough #appsec #NodeJS blog.hailstone.io/why-contex…
“How to Approach Security with Node.js” by @nodejs medium.com/@nodejs/how-to-ap…
2
2
Fasten your Helmet.js (Part 1): Why you need to secure your Express HTTP headers blog.hailstone.io/fasten-you… #nodejs #expressjs #helmetjs #appsec
3
1
12
Glad to see that browsers have become a major force in protecting against #XSS with headers like #csp. This wasnt the case even a few years ago. Projects like #helmetjs are invaluable to this cause #appsec #devsecops ow.ly/DDuc30j3yex
Hailstone is sponsoring @NodeSummit this week! We are a new application security solution for #NodeJS that helps teams deploy secure code, faster. Swing by and say hello! #NodeSummit
2
7
Hailstone retweeted
CVE-2018-3754 Node.js third-party module query-mysql versions 0.0.0, 0.0.1, and 0.0.2 are vulnerable to an SQL injection vulnerability due to lack of user input sanitization. This may allow an attacker to run arbitrary SQL queries ... bit.ly/2u4kBIv
Good overview of “Developing Secure Node.js Applications” by @InfoSecPhantom jsblog.insiderattack.net/dev… | #AppSec
1
1